// Hands-on Security Training · Included Member Benefit

Sandboxed Security Labs for Builders and Defenders

Practice web defense and security fundamentals in disposable, isolated sandboxes. Solve challenges, discover secret flags, and learn exactly how to prevent attacks in production software.

Launch Missions → Crypto Lab 🔑 Rules of Engagement

sandbox-shell // orbyt-cyberlab

$ cyberlab connect --sandbox=isolated
[✓] Isolated environment mounted
[✓] Network isolation active (no outbound egress)
[*] Loading mission brief: "The Leaky Login"
[!] Weakness detected: Verbose authentication error
[+] Flag acquired: FLAG{verbose_errors_help_attackers}
[✓] Defense unlocked: Generic error mitigation deployed
XP Awarded: +50 XP · Badge: Web Scout

How Cyber Lab Works

1. Choose a Track Browse web fundamentals, injection, authentication, crypto, and real-world applied sandboxes.

2. Enter the Sandbox Each challenge runs in an isolated mini-application. It is disposable and safe.

3. Find the Flag Inspect source code, observe requests, understand logic flaws, and uncover the secret flag.

4. Master the Defense Every completed mission unlocks the "How to Prevent This" architectural guide, XP, and Commons badges.

Explore Practice Tracks

🌐 1-6

Web Security & Injections

Learn to identify and eliminate web vulnerabilities from input tampering to stored code execution.

36 Missions Explore →

🔑 2-6

Authentication & Sessions

Explore broken authentication, token forgery, CSRF, and privileged credential hijacking.

9 Missions Explore →

🔐 1-6

Cryptography & Encodings

Understand mathematical foundations, entropy, one-way hashing, and secure cipher implementation.

5 Missions Explore →

⚡ 2-7

Application Logic & Races

Challenge hidden assumptions in business workflows, financial state machines, and concurrency.

6 Missions Explore →

☁️ 3-7

API & Cloud Architecture

Audit modern JSON APIs, token scopes, server-side request forgery, and metadata isolation.

7 Missions Explore →

🛡️ 2-7

Defensive Engineering & Hardening

Step into the security engineer role: analyze telemetry, patch root vulnerabilities, and verify remediations.

3 Missions Explore →

🛡️ Golden Rules of Engagement

Target only your assigned mission sandbox. Never attempt to scan or attack live Orbyt infrastructure or third parties.
Practice applications are deliberately vulnerable toys designed for education.
Every mission pairs weakness discovery with a defensive takeaway. The goal is to build secure systems.
Included with every Orbyt account at no additional cost.

Read Full Code of Conduct →

🔑 UAC Layered Cipher & Toolkit

Explore Kris's proprietary layered cipher (reverse → base64 → MD5 hash chaining → dual secret substitution passes). Test it live in the interactive Crypto Lab and download your own personalized uac.php library with fresh unique substitution tables.

Open Crypto Lab → Download uac.php ⬇️